Item Search

NameAudit NamePluginCategory
1.1.2.2 Ensure nodev option set on /tmp partitionCIS Debian 10 Workstation L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.1.2.2.2 Ensure nodev option set on /dev/shm partitionCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

1.1.2.2.3 Ensure nosuid option set on /dev/shm partitionCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.1.2.3 Ensure noexec option set on /tmp partitionCIS Debian 10 Workstation L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.1.2.4 Ensure nosuid option set on /tmp partitionCIS Debian 10 Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.1.5.2 Ensure nodev option set on /var/log partitionCIS Debian 10 Workstation L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.1.6.3 Ensure noexec option set on /var/log/audit partitionCIS Debian 10 Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.1.8.1 Ensure nodev option set on /dev/shm partitionCIS Debian 10 Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.3.2 Ensure permissions on bootloader config are configuredCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

1.4.2 Ensure permissions on bootloader config are configuredCIS Debian 10 Workstation L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.5.1.1 Ensure SELinux is installedCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.6.1.1 Ensure AppArmor is installedCIS Debian 10 Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.6.1.2 Ensure AppArmor is enabled in the bootloader configurationCIS Debian 10 Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.6.1.3 Ensure all AppArmor Profiles are in enforce or complain modeCIS Debian 10 Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.6.5 Ensure access to /etc/issue is configuredCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.6.5 Ensure access to /etc/issue is configuredCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

1.7.4 Ensure permissions on /etc/motd are configuredCIS Debian 10 Workstation L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.7 Ensure the Core Dump Directory Is SecuredCIS Apache HTTP Server 2.4 L1 v2.1.0 MiddlewareUnix

ACCESS CONTROL, MEDIA PROTECTION

3.8 Ensure the Lock File Is Secured - 'LockFile directory'CIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.8 Ensure the Lock File Is Secured - 'LockFile permissions'CIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.8 Ensure the Lock File Is Secured - permissionsCIS Apache HTTP Server 2.4 L1 v2.1.0 MiddlewareUnix

ACCESS CONTROL, MEDIA PROTECTION

3.9 Ensure the Pid File Is Secured - 'PidFile directory'CIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.9 Ensure the Pid File Is Secured - 'PidFile permissions'CIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.11 Ensure Group Write Access for the Apache Directories and Files Is Properly RestrictedCIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.12 Ensure Group Write Access for the Document Root Directories and Files Is Properly RestrictedCIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.13 Ensure Access to Special Purpose Application Writable Directories is Properly RestrictedCIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

4.1 Ensure Access to OS Root Directory Is Denied By DefaultCIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

4.1 Ensure Access to OS Root Directory Is Denied By Default - 'httpd.conf no Allow directives exist'CIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

4.1.1.2 Ensure permissions on /etc/crontab are configuredCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

4.1.1.5 Ensure permissions on /etc/cron.weekly are configuredCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

4.2.1 Ensure permissions on /etc/ssh/sshd_config are configuredCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

4.3 Ensure OverRide Is Disabled for the OS Root Directory - AllowOverride NoneCIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

4.4 Ensure OverRide Is Disabled for All Directories - AllowOverrideCIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

4.5.2 Ensure system accounts are securedCIS Debian 10 Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

4.5.2.2 Ensure root user umask is configuredCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

4.5.2.3 Ensure system accounts are securedCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

4.5.2.4 Ensure root password is setCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

4.5.3.3 Ensure default user umask is configuredCIS Amazon Linux 2 v3.0.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

5.1.4 Ensure all logfiles have appropriate access configuredCIS Amazon Linux 2 v3.0.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

5.1.4 Ensure all logfiles have appropriate access configuredCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

6.1.1 Ensure permissions on /etc/passwd are configuredCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

6.1.1 Ensure permissions on /etc/passwd are configuredCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

6.1.3 Ensure permissions on /etc/group are configuredCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

6.1.7 Ensure permissions on /etc/gshadow are configuredCIS Amazon Linux 2 v3.0.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

6.1.7 Ensure permissions on /etc/gshadow are configuredCIS Debian 10 Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

6.1.8 Ensure permissions on /etc/gshadow- are configuredCIS Amazon Linux 2 v3.0.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

6.1.8 Ensure permissions on /etc/gshadow- are configuredCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

6.2.11 Ensure local interactive user dot files access is configuredCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

8.1 Ensure ServerTokens is Set to 'Prod' or 'ProductOnly'CIS Apache HTTP Server 2.4 L1 v2.1.0 MiddlewareUnix

ACCESS CONTROL, MEDIA PROTECTION

11.2 Ensure Apache Processes Run in the httpd_t Confined Context - httpdCIS Apache HTTP Server 2.4 L2 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION